PT-2026-27919 · Rascals · Rascals Meloo
CVE-2026-25358
·
Publicado
2026-03-25
·
Atualizado
2026-03-30
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
rascals Meloo versions prior to 2.8.2
Description
An issue exists in rascals Meloo related to the deserialization of untrusted data, which allows for object injection. The deserialization process does not properly validate the incoming data, potentially enabling an attacker to inject malicious objects.
Recommendations
Update rascals Meloo to version 2.8.2 or later.
Correção
Deserialization of Untrusted Data
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Rascals Meloo